Data Privacy

NY AG Complaint Against Robert G. Kramer

The New York Attorney General, along with Attorneys General from 9 other states, has filed a complaint against Robert G. Kramer and his associated company. The complaint alleges violations related to internet and technology services, seeking to hold the defendant accountable for alleged deceptive practices.

35 State AGs Warn xAI Over AI-Generated Intimate Images

Thirty-five State Attorneys General have issued a letter to xAI expressing deep concern over the creation and dissemination of AI-generated non-consensual intimate images (NCII) using its Grok chatbot. The AGs urge xAI to take further steps to address the harms caused by this technology, particularly concerning women and children.

State AGs Support Senate Kids Online Safety Act, Oppose House Version

45 State Attorneys General have written to Congress supporting the Senate version of the Kids Online Safety Act (S. 1748) and opposing the House version (H.R. 6484). The letter highlights concerns about preemption language and the omission of a 'Duty of Care' in the House bill, advocating for stronger protections for minors online.

FTC Sends $103,420 in Refunds to Consumers for Deceptive Marketing

The FTC is sending over $40,700 in refunds to 578 consumers who purchased deceptively marketed products from Golden Sunrise Nutraceutical between July 2017 and July 2020. The refunds stem from a court order against the company and its director for making false health claims.

EDPB-EDPS Joint Opinion on Digital Omnibus Legislative Proposal

The European Data Protection Board (EDPB) and the European Data Protection Supervisor (EDPS) have issued a joint opinion on the Digital Omnibus legislative proposal. This opinion provides their assessment and recommendations on the proposed legislation, which impacts data protection and privacy within the EU.

Belgian DPA Orders Diocese to Delete Baptized Person's Data

The Belgian Data Protection Authority (DPA) has ordered the diocese of Ghent to delete a baptized person's data from the baptismal register. The DPA ruled that the church's legitimate interest in retaining the data does not override the individual's right to erasure under GDPR when they expressly wish to leave the church.

CJEU Rules on IAB EUROPE Case, Belgian DPA Fine

The Court of Justice of the European Union (CJEU) ruled that a structured character string capturing user preferences is personal data and that IAB EUROPE can be considered a joint controller. This decision impacts the Belgian DPA's prior €250,000 fine against IAB EUROPE.

Market Court confirms €250,000 DPA fine in IAB Europe case

The Market Court has confirmed a €250,000 fine imposed by the Belgian Data Protection Authority on IAB Europe. While the original decision was annulled on procedural grounds, the court upheld the reasoning that IAB Europe acts as a joint data controller for user preferences within its Transparency and Consent Framework.

Market Court refers FATCA data transfer questions to CJEU

The Belgian Market Court has referred 13 preliminary questions to the Court of Justice of the European Union (CJEU) regarding the FATCA agreement and data transfers to the US. This action seeks clarification on the compatibility of the agreement with EU data protection laws, including GDPR and Directive 95/46/EC.

European Commission notifies Meta over AI assistants exclusion from WhatsApp

The European Commission has sent a Statement of Objections to Meta, alleging a breach of EU antitrust rules by excluding third-party AI assistants from WhatsApp. The Commission intends to impose interim measures to prevent serious and irreparable harm to the market.